Commit

ea04524

What’s your favorite obscure PHP fact? Mine is that == can make "0" == "0e123456" evaluate to true because PHP treats both as numbers in a loose comparison. 😂

commit ea04524

That 0e magic hash quirk caused so many real-world auth bypasses back in the PHP 5 and 7 days whenever people compared MD5 strings with == instead of hash_equals.